How to monitor eventlog for ReFS error ID 133

If you use ReFS for your Veeam repositories it makes sense to monitor the Windows Event Log for error ID 133 (“The file system detected a checksum error and was not able to correct it. The name of the file or folder is…”).

Next, open the Windows Task Scheduler and create a new task with the following settings:

General Tab:

Name: Alert Error 133

Security options: Change User or Group -> NT AUTHORITY\SYSTEM

Triggers Tab:

NEW… -> Begin the task “On an event”

Basic

Log: System

Event ID: 133

activate “Enabled”

Action Tab:

Action: “Start a program”

Program\script: specify the path to your alert.bat file

Check the other available options if useful for you and save the task.

How can I check if the alerting rule operates as expected?

You can generate a test event with ID 133 using the eventcreate command utility.

Open a command prompt and enter the following command:eventcreate /l SYSTEM /t ERROR /so ReFS /id 133 /d “Testevent ID 133”
Check the System event log and you will hopefully find the created test event ID 133:

When the monitoring task is working as expected you should find a mail with the alert in your inbox.